Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer
File: S_PofKK5q1lZdiDQT8BUEY1-09k.cer (raw, json)
Hash identifier: mwrWkfF5jAdttMeALvvNIxOhVSdMinG5WVItddHLSck=
Subject key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 01CD15
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
caRepository: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Mon 27 Nov 2023 17:10:12 +0000
Certificate not after: Fri 31 Jan 2025 00:00:00 +0000
Subordinate resources: AS: 133769
IP: 43.250.188.0/22
IP: 103.42.36.0/22
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 21:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118037 (0x1cd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Nov 27 17:10:12 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:13:10:dc:82:f9:e8:82:a7:6a:d7:11:87:
73:8e:f7:8b:3a:89:c9:29:74:06:33:0b:7d:9f:83:
37:87:ca:ec:c6:a7:75:5f:bd:0b:ed:ad:ce:2f:4a:
53:10:34:84:b8:e7:fe:a2:f8:3d:85:91:ff:08:e4:
4d:d6:84:69:a7:4f:47:15:ef:44:13:27:c2:f9:d3:
c2:6b:59:37:66:b4:20:b9:08:34:e6:2a:d8:35:95:
d1:f6:c5:f4:54:78:09:c4:53:5c:05:c1:52:23:9f:
20:03:f7:cb:93:15:13:b3:b0:c2:54:6e:5f:e9:48:
75:5c:93:d5:ad:4d:66:14:99:09:57:44:6d:2a:f0:
53:2f:fd:c4:3b:9c:a1:fc:01:da:23:91:2a:7c:80:
b0:1e:44:36:ea:a3:2a:11:59:06:2c:ad:02:fb:22:
1b:c1:83:58:a7:e2:68:cf:78:70:0c:da:93:5e:c8:
88:a3:34:22:90:05:ab:ee:33:e6:65:ff:4a:e8:0f:
ef:5c:46:29:a3:2f:9b:b2:ae:03:57:95:be:0d:59:
82:6f:d0:89:20:4d:75:6d:cc:7c:c0:8f:65:2a:2a:
ff:3e:0b:b5:4b:27:a3:33:9f:68:e9:8b:d3:1a:1d:
f9:95:05:cf:28:06:3b:e2:df:ba:c0:6a:ee:2a:3e:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
133769
sbgp-ipAddrBlock: critical
IPv4:
43.250.188.0/22
103.42.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e5:dc:65:c4:76:1c:8b:6d:c9:e5:f2:8b:9e:ff:8b:b9:c9:
c2:fd:da:77:33:7b:e6:56:85:c3:52:67:82:f2:82:6b:fc:6e:
9f:4b:bb:02:d0:16:75:f3:43:68:8a:84:cf:01:36:bf:be:e2:
51:bf:18:13:4a:1e:da:eb:6f:57:88:67:b4:fc:fa:a7:af:48:
17:c5:09:a9:bf:ec:8d:31:76:84:f2:be:4a:3d:ce:31:49:8c:
14:e5:02:9c:41:45:ea:29:dd:9a:af:3b:a8:de:51:11:6b:aa:
1c:e2:ae:a2:ab:2a:2a:a3:fa:5c:20:ed:a3:1a:36:f5:90:51:
07:b0:3b:77:ec:95:17:55:a6:c2:e5:b1:f8:42:94:17:73:e7:
74:9f:f0:95:80:1a:57:d3:61:62:66:de:f1:24:70:20:0d:b4:
0d:b2:1e:f4:2a:27:56:83:c7:27:a7:87:15:af:b1:32:10:03:
99:85:b8:27:2a:1b:0d:74:96:4c:e7:3c:c8:77:6e:55:d7:41:
fe:c6:37:43:31:18:f2:78:b3:b9:1f:b0:b5:27:ba:bc:c7:ab:
a4:67:54:5c:67:53:75:d3:20:49:4d:c1:4e:7f:05:5e:4a:96:
fe:50:8a:72:8f:ef:1a:d2:54:37:4a:84:89:1b:18:b5:56:ca:
5e:ba:d8:b0
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIDAc0VMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4
QzkwN0FBNzlGMB4XDTIzMTEyNzE3MTAxMloXDTI1MDEzMTAwMDAwMFowRjERMA8G
A1UEAxMIQTkxOTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBE
MDRGQzA1NDExOEQ3RUQzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3kxMQ3IL56IKnatcRh3OO94s6ickpdAYzC32fgzeHyuzGp3VfvQvtrc4vSlMQ
NIS45/6i+D2Fkf8I5E3WhGmnT0cV70QTJ8L508JrWTdmtCC5CDTmKtg1ldH2xfRU
eAnEU1wFwVIjnyAD98uTFROzsMJUbl/pSHVck9WtTWYUmQlXRG0q8FMv/cQ7nKH8
AdojkSp8gLAeRDbqoyoRWQYsrQL7IhvBg1in4mjPeHAM2pNeyIijNCKQBavuM+Zl
/0roD+9cRimjL5uyrgNXlb4NWYJv0IkgTXVtzHzAj2UqKv8+C7VLJ6Mzn2jpi9Ma
HfmVBc8oBjvi37rAau4qPpldAgMBAAGjggMVMIIDETAdBgNVHQ4EFgQUS/PofKK5
q1lZdiDQT8BUEY1+09kwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag
ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2
NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0
RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF
BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTkxQjcxL0I4NDlCQTEyQzYwNDExRUNCOTA2OTE1Q0M0RjlBRTAyLzB+BggrBgEF
BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B
OTE5MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktL
NXExbFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy
ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAgqJMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK/q8AwQCZyok
MA0GCSqGSIb3DQEBCwUAA4IBAQA65dxlxHYci23J5fKLnv+LucnC/dp3M3vmVoXD
UmeC8oJr/G6fS7sC0BZ180NoioTPATa/vuJRvxgTSh7a629XiGe0/Pqnr0gXxQmp
v+yNMXaE8r5KPc4xSYwU5QKcQUXqKd2arzuo3lERa6oc4q6iqyoqo/pcIO2jGjb1
kFEHsDt37JUXVabC5bH4QpQXc+d0n/CVgBpX02FiZt7xJHAgDbQNsh70KidWg8cn
p4cVr7EyEAOZhbgnKhsNdJZM5zzId25V10H+xjdDMRjyeLO5H7C1J7q8x6ukZ1Rc
Z1N10yBJTcFOfwVeSpb+UIpyj+8a0lQ3SoSJGxi1Vspeutiw
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:23 2024 by rpki-client on console-fra.rpki-client.org